Second for Pangolin.

They have a cloud hosted free tier you can try but it’s time/ transfer limited. If you like it, you can self host on your VPS with no subscription since it’s all FOSS software.

Also, thank you for addressing the native app vs Pangolin auth layer challenge. I’ve been wrestling with that myself.